Employing Graphical Risk Models to Facilitate Cyber-Risk Monitoring - the WISER Approach
Journal article, Peer reviewed
Accepted version
Permanent lenke
http://hdl.handle.net/11250/2500552Utgivelsesdato
2018Metadata
Vis full innførselSamlinger
- Publikasjoner fra CRIStin - SINTEF AS [5654]
- SINTEF Digital [2388]
Originalversjon
Lecture Notes in Computer Science. 2018, 10744 127-146. 10.1007/978-3-319-74860-3_10Sammendrag
We present a method for developing machine-readable cyber-risk assessment algorithms based on graphical risk models, along with a framework that can automatically collect the input, execute the algorithms, and present the assessment results to a decision maker. This facilitates continuous monitoring of cyber-risk. The intended users of the method are professionals and practitioners interested in developing new algorithms for a specific organization, system or attack type, such as consultants or dedicated cyber-risk experts in larger organizations. For the assessment results, the intended users are decision makers in charge of countermeasure selection from an overall business perspective. Employing Graphical Risk Models to Facilitate Cyber-Risk Monitoring - the WISER Approach